|  |
Citadel Announces Hercules 4.0
Citadel Security Software Inc., provider of enterprise vulnerability management and security policy compliance solutions, announced the general availability of Hercules 4.0, with significant new enhancements that help organizations manage security compliance audits, risk assessments, automated vulnerability remediation and endpoint security. Citadel continues to expand the Hercules product with two new offerings, Hercules Compliance Manager, a solution for auditing and reporting security policy compliance, and Hercules Remediation Manager, a flexible, automated solution for managing vulnerability remediation and enforcing security policies.
"Organizations looking to implement security configuration audit and policy compliance to address regulatory requirements such as Sarbanes-Oxley, HIPAA and Gramm-Leach-Bliley, as well as looking to improve their security posture, should evaluate vendors offering security configuration and vulnerability management functions," said Amrit Williams, Research Director, Gartner, Inc.
With these new offerings, Hercules 4.0 is the first solution that facilitates cooperative interaction across organizational boundaries to assess security policy compliance, perform automated vulnerability remediation and enforce security policies through a common platform and user interface. Hercules 4.0 is available as a comprehensive suite or in flexible, modular components to suit users' business needs. Additionally, Citadel's unique Security-On-Demand pricing model allows users to pay for compliance audits and remediation actions as they are performed, further minimizing upfront expenditures.
Hercules 4.0 New Features
* Hercules Compliance Manager audits compliance against security policies and configuration baselines, enabling security managers to assess the state of their networks from a single console. Compliance Manager includes preconfigured policies for Sarbanes-Oxley, HIPAA, FISMA, SANS Top 20, DISA, NSA, and other security configuration guidelines and allows organizations the flexibility to create and manage their own internal security policies and guidelines. In addition, enterprise-class reports deliver executive level information to assess current security compliance status and risk analysis. Compliance Manager is fully integrated with Hercules Remediation Manager to provide automated enforcement and remediation of non-compliant systems.
* Hercules Remediation Manager manages and automates the remediation process for vulnerabilities identified using Hercules Compliance Manager or vulnerabilities detected by industry-leading vulnerability assessment tools. Remediation Manager aggregates vulnerability data from these disparate sources, and provides a streamlined workflow for reviewing, prioritizing, scheduling automated remediations, and reporting on remediation activities. Remediation Manager includes the world's largest library of 23,000 tested remediation actions that resolve vulnerabilities related to unsecured accounts, unnecessary services, backdoors, unsecured configurations and missing patches.
* Hercules Visual Security Dashboard provides a collection of visual instrument displays to help users monitor their overall security policy compliance and remediation status. Each instrument display provides the ability to drill down to the next layer of detail which enables the appropriate personnel to review or take action based upon the current status. Users can customize the Visual Security Dashboard to personalize the information presented.
* Hercules AssetGuard Risk Analysis performs inventory and risk assessment. It collects and stores intelligence about the hardware, software and services running on network devices and prioritizes key assets for scheduling compliance validation or remediation. AssetGuard identifies high-risk devices based on three criteria: the technical asset rating, the vulnerability rating and its relative impact on business operations. With this detailed risk analysis, AssetGuard can improve productivity by helping organizations to focus efforts on the most critical devices that need remediation or configuration changes to meet IT policies and regulations.
* Hercules Enterprise Reporting enables enterprise customers to aggregate data from multiple Hercules servers into a single data repository and provides enterprise-level reporting. Reports can be scheduled on recurring intervals and delivered via email to key stakeholders within an organization. Hercules 4.0 also includes a well-defined reporting schema to allow customers to create custom reports using any standard ODBC compliant reporting package.
* Enhanced Endpoint Security gives customers a choice on the technology that they employ for managing admission to their network. Customers have the ability to select Citadel's ConnectGuard endpoint security or Cisco Network Admission Control (NAC) framework. Hercules 4.0 provides a new user-defined network access policy that allows administrators to set minimum requirements for network admission such as anti-virus requirements, minimum patch levels and security configurations. Hercules 4.0 has also achieved Cisco NAC certification.
* Security-On-Demand is an innovative, usage-based pricing model that allows customers to deploy the full Hercules offering and pay for the number of remediation or compliance audits performed.
"With extensive experience securing the world's largest government and commercial networks, Citadel understands the scope, scale and urgency of threats that organizations of all sizes face every day," said Steve Solomon, CEO of Citadel Security Software. "In Hercules 4.0, we are delivering a policy-based solution that bridges the gap between security and operations professionals, making it possible to assess an organization's security posture, take steps to mitigate risk and enforce compliance, and verify and report on IT security and policy status. By delivering the first true pay-as-you-go pricing model, Citadel continues to be a pioneer in the security software industry. With our Security-On-Demand offering, customers now benefit from the use of the full suite of the Hercules solution while only paying for the security compliance, enforcement and remediation actions that Hercules performs."
Pricing and Availability
Hercules 4.0 is available now direct from Citadel and will be available through Citadel's network of Secure Channel Partners consisting of regional and national security services providers who resell security products to complement their existing security, networking and consulting services. Customers may choose from several pricing options to suit their business needs:
* Security-On-Demand. Under this plan, customers will be billed for each compliance audit, enforcement action or vulnerability remediation conducted. This provides a fast and easy way for organizations of all sizes to initiate a process for ensuring compliance and securing their networks.
* Subscription. One, two or three year subscriptions are available, giving companies the confidence of a proven solution with predictable payments.
* Perpetual licensing. Available for enterprise-wide deployments, this plan is most attractive to organizations with large numbers of devices that require compliance audits and remediations.
Citadel also offers architectural design, planning and implementation, training and long-term technical and customer support. 07.06.2005, Citadel Security Software Inc.
Subscribe to the newsletter | | |
| | | |
